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^^ -^^l-: 2003/10/27 



-^I'^^V. ^}-%-^} ^ ^5l7l^# ^<=^^}s. ^^^^^ <^l-g-*!- 7fl^^^^:a 

^5^^t!:l=f. 7]^^ Al^Ej nfl 711^^51- >H^^>^ ^7fl7l» i^^l-^ ^71]^^ ^7l]el-:il, A-^ 

^^1-^ Hi ^^11- ^^tb ^11^* ^i^^H]7ll AV-g-y^V^ ^7fli;t^ ^A] ^ 

^ ^i^^m ^7fl^2}- ^i^^^Vs] Hl^7ii- ^ 7;\^^^^. ^i^^m Tfl-ar^H ^l-§- 

^HlTfl ^^^>Ji >^>-§-^>^ ^l^l^l* ^H*H ^i^^Hl7il ^^t!:i=f. >H^^>^ ^1a1^1<H1 
^i^^><^ AV-g-^HiTil ^^s^Vjl AV-g-^>^ A^t^^ ^lAl;^]# 4^t!:^-. a>-§-;^>^ 

:£ 2 



23-3 



1020030045216 



%n 'U^}: 2003/10/27 



^^^^•^ ol-§-tb 711 7laVo^ ^ IJ-^ {APPARATUS AND METHOD FOR 

GENERATING AND VERIFYING ID-BASED BLIND SIGNATURE BY USING BILINEAR PARINGS} 



£ la 521- ib^ ^ ^Tgo^ wV^^lt!- ^^HH itj-^ ^'Jd^'^^ ol-g-t!: 711^^^;^:^- 7M 
^ ^H^i^ Al:ieg^ d\]X\^}^ 

-£ 2^ ^ ^^1^^ tif^^ti- -^^l-^Hl i4€- ^^^^^ c>l-g-*v 7il<y^^^^ 7itivo^ 

100 : -^i^;^} 200 : ^V-g-^V 

300 : ^Sl7l^(a^, 71^5^^ AjiBl) 
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^ "a-S Al>,e^oll ^olD^. t:-!^ ^4*>7ll^ ^^^^^ ^]-%-^ 7^91^^^^ 

^7fl7l Aj^E^ollA^, ZV A>-g-^>^ ^7fl7l5q- ti]^7l ^^t^ . ^}-%-:^}^ ^7ll7lSf 7]]^ 

^t^-S-Sl ^^A^CDigital Certif icate)«^l ^t!"^. '^^^'\ 7]^ 

(certificate based system)<^l>^^ , a>^;^>o^ ^7ll7ll- Al-g-^]-7l :^<^ ^^^}^ >^>-§-;^>Sl 

^l-a: ^-1;^^- 

•y^^i 71WVS1 ^7fl7l ^^^ofl^i 7l^e1 ^a^Vl- c3.^5|-*>7] ^^>o^, a^b] 5 (Shamir )fe 
1984\lofl 7flol^it^:a. 7)ti}.o^ o}.^^ 7]^^ ;HlttMtf(A. Shamir, 

Identity-based cryptosystems and signature schemes. Advances in Cryptology-Crypto 84, 
LNCS 196, pp. 47-53, Springer-Ver lag, 1984.). H ^S. 7fl<?]-ii^^:a 7]^^ ^J:^ 7] 

^l-§-^>^ ^7fl7l7> ^f^^^7]^O.S-^Bl ^^>HS-^t1 ^71] 711- ^>-§-*>^ tfl 

Aloil ai^a^o.^ A>-g-^l-^ ^7ll7l^ ^ ^ ^cf^ ^^cf. rc)-el-A^, 7fl<?l^^^:a. 7] 
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<9> ^-Jd^^l-Cbi linear pairs), <^ll- ^^S, cfl^ ^^S] ?fl^(Weil) EflolE(Tate) 

-a- i^^^^l (Discrete Logarithm Problem)* ^7}^7] ^sfl <^l-§-sl$ii=f. c^]^ s.^^ ^^.g 
^ A>-g-t!- <^^y.oi(MOV) EfloiH <5l-§-t!: ^lH<a:(FR) ^^^^<^m 

^El-^^^'Hl^i^ ol^V^H^^^^Hl- ^tb^joflA-io^ <^l^t}]^^^lS. ^^1=^1-514. o]s^^ 

<io> s.^ :a.v)l(Boneh)5!l- ^^a^CFrankl in)^ 7fl<y^^;^:a 7lti]: Al>iEfl(D. 

Boneh and M. Franklin, Identity-based encryption from the Weil pairing. Advances in 
Crypt ology-Crypto 2001. LNCS 2139, pp. 213-229, Springer-Ver lag, 2001. )4 >iD>H(Smart)^ 

7fl^<^^^i 7]^ 91^ 7l -g-^ ^S.£#(N.P. Smart, Identity-based authenticated key 
agreement protocol based on Weil pairing. Electron. Lett., Vol.38, No. 13, pp. 630-632. 
2002.) ^ % 7}^] 7)l^^'i^Ji 7]^ 7]^c>] o^lcf. 

<11> -^71171 ^^<HlAl ^}^7.}9] ^i^A^^ ^H^l^oll o)^ iS^Cf. ^HA^T^Sl 7fl'^^ #(D. 

Chaum, Blind signatures for untraceable payments. Advances in Cryptology Crypto 82, 
Plenum, NY. pp. 199-203, 1983. )<H1 ^SflAi ^s^S. ^1<?>S] ^ o.t^ , ^S. ^ ^^^11 

-i-^ -l-^ Al^E^oflA-l A>-g-;^>o^ oit^A^^ ^l^tb^. ^^V^i^4 ^sl, ^H^i^ 

^i^^>7}- l^lAl;^lsq- A^rg ^3l)-oll cfl^ ^ ^flS. XiflAl^^lSl A^t:^ ^ 
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7l^S] A^i^^ 711 010^ ^7fl7l7> O.^ 7^9l^^^^o]7] 

^Sl:7>^^j£ ni.^^].,gA:| , ^^(generic pararrel attack) «fl cfltV <y:^^^<^l 

<14> ^ ^x^o^ ^ ^^o)l A^T^;^}, A>-g-^> ^ ^Sl7l^^ %l-ol;^>S. 7\\9l^^^ 

^7fl7lS!l- til^^l* ^J^^^>^ ^^4. ^J-7l ^Sl7l^ol AJ.7I Al^Ej Dl]7fl^^Sq-. >a-7l 
:^}^ ^7fl7ll- 5E^s:>^ ^7l]^# ^7l]*l-^ >a-7l Ai^;^>o^ Hl^7l« oy:^^ ^11^^ 

^ ^o^7l ^i^^l-ollTll ^4^^>^ ^^4, -^oM A>-g-;^>7> ^7] ^7^-%: ^^^}^ ^"l^^V^ 
^7] >H^^>7> >a-7l ^7flSjb4 >^7l ^^^^T]-^] Hl^T-l^ ^-JO^VJI ^S>^ n^^4. ^^71 
^V7> ^1?- 7il>a:*>Jl ^71 ^11- ^7] A}^7^6\]:^] ;^^^>^ ^^31-. >^7l A>-g-;;.>7> Tifl 
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7l A-^t^^ 4^§>^ ^^3)-, >^7l A>^^>7V A^x^Q] ^x^A^^ ^^^^ i^*> 

^ ^^5^ S Cf^ ^^ofl o]^^^ ^^^^}, ^\^^} ^ Als]7l^^ %<^7\S. 7fl^Al 

7i» ^^^^ ^nM. ^y] ^s\7]^o] ^7] ^<\^7]-o] 7ll^^^;^:y.i- o]^t}c^ ^7] a^^^t.} 

^ ^7fl7lfif til^7l» ^S^^^^ ^A]^, ^7] ^^7]^o] ^7] ull7fl^-^Sq- ^ 

y] ^i^^^V^ ^71] 711- i^e>^ ^711 ^7fls:>^ ^7] ^7^4 ^V7l A^x^^j-O^ U] 

^^^V ^H^^ :f-^ >JJ-7l AlT^^>o1]7ll ^^^}^ ^7] A>-g-^>7V ^7] ^7m^ ^ 

Al€r>J7 ^i^5>^ C};^l5>f ^1-71 A^t^^>7> ^7] ^7^4 ^7] A^^^}^] W]^^!* ^^^VJI ^"I ^ 

^TilSq-, Aj.7l Airg^l-7]- ^1]- n^t}jL ^^7] ^^7] A}^7.\d\]^] ^^^^ ^ 

^y] ^}-%-^}y} ^^^■JL ^y] ^^ ^^]^]* a-ii^j^HItii ^^^}^ ^y^]^, ^ 

y] M^y^y} ^y] ^^ ^^^^\Jl ^y] A^^^ ^1ai^i# ^7] av^j^htii ^ 

Til^f, Aj-71 A>-g-;^l-7l- Aj.71 A-^T^^ Dl)Al;^ll- 4^s:>^ ^^^l^^, A>-g-;^1.7> A-^x^o^ ^^"^^^^ 

^^^>^ S^*>^ ^^^^^ <^1-g-*V 7ll^Alig^_y^ 7l«Vo^ ^^A-l^^ u^^o] 

I^VTgo^ ^A^ ^ ^-§-1 

-£ la^ ^^^-^^ Oj-g-^ 7flolAlig;^_y^ 7]H]-o] ^^A^i^ A]>^E^o^ ^S.£.olcf. ^ A] 

^^^7^(100), A>-g-;^K200). ^S]7]^(300)Sl xfl ^«^yc>l. i^t!:^:}. ^y]^^ ^ ^]^^ 
^ ^ ^^E] Al>,E^<^ ^ 91^^, 'a^^ ^^31 -i-Ai uilH^^H SE^ c|-€- 7l#oil 
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^^^^ -i-Al^ ^ ^Cf. ^Cr^^V^ A>0]0fl nfoj^ ^BflO) Dfl^jofl 

<17> ^Sl7l^(300)^ ol]7fl^^l- ^J^^*>Jl Df^rEl^ll- >Jd^t!-cl-. SEt!:. -ysl^l^ 

(300)^ 7fl<y<biit;^^l. A>-g-^>a^ ^^i^^KlOO)^ ^7ll7l<2f >«>^^t!:Cf. H 

^JL ^Sl7]^(300)^ i^fl7fl^^S!]- A^^^>o^ ^7fl7ll- i^sr>^ ^7fl^^ ^7fls:l-JL, 

^;^l-(100)fi1 til^^l* ^^t!: ^11^^ **fl >^i'^:^l-(100)<^l7ll ^d^S^tl:^. 

<18> A>-g-^>(200)^ ^5171^(300)0] ;«11^*1-^ ^7l]i;t^ ^A] ^ J^^^Cf. ZLElJI A]-g-;^> 

(200)^ zL^-ir ;^i^oil^Hl ;H^^>7iq- 7l^t!:i=l-. 

<19> :3. -g-0>, ^i^^XlOO)^ <;d^7l^(300)ol >^l^e1-^ ^7M^ ^i^7^>Sl Wl^7l# ^A] ^ 

^i^J-tl-Cl-. 1151 Jl A-lx^^>(100)fe ^i^J-Dfl^Hl 75l:^J-^>7ll4 7l^t!:4. 

<20> £ Ib^ ^-a^^* 0]-%-^ 71101^^^:^ 7l«VSl ^^A^tg Al^^E^oll %l-o^^>^ >H^^> 

(lOO)Sl- AV-g-;^>(200)2l ^^iolcf. A^T^;^].(100)^ ^1^- ^l-y-^fo^ H ^1^- 

(200)<Hl7ll ^4^^1:1-. A>-g-;<K200)^ ^i^^^ ^j^l^ll- ^H*><^ H °11a1;^11- A^tg;^].(ioo) 

^iTll ^^tb^-. >H^^>(100)^ ^l^l^l^ ^-g-^ S.€- ^1) ^^1^1 Si A-ltg 7|l>a:*H 

-g-^>(200)<Hl7ll ^^S-tt^-. A]-g-^>(200)^ >H^;^V(100)S.^Ei A-ltg^ T^l^l^l* 

A^x^o^ ^^^^^ 

<21> ol^sfl £ 2» ^S*>C^, ^ ^^ofl 4^ ^^^-^^ Ol-g-^ 711^^1^;^^^^ 7]«l.o^ ^^^^ 

^ «o^^<^l C)l^ -a-'Hl^Ml ^^^Cf. 
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<23> 1. eCaP, bQ) = e(P. Q)^b ^ i?V^*>^ 



<24> 2. 66°, Q) ^ 1 ^^Sr>^ Z', ^ e ^ ^711 



<25> 3. P, Q G Gi^] cfltb er/', 

<26> ufl7fl^^l- ^^^^^\^ 4^^(^7fl 201) ^<L> C ^ 4 7> ^^^^^ 

. HE^ ji ^^A^^^l-o] sq- ^ if cflt!: e: Gj xGi 

^ G2 % ^J^^t!:^-. ^ ^'^^fl^i Ef^ ^-a^ ^Bf-^ ^V^Hl'eiaacobian)*:)! 

^, G2^ Z/* ^>-g-tbl=l-. l^^-^^. ^5] 71^(300)^ ^V^iEi^lS Zq* <^ 

<27> :foil -iJ^i 71^(300)^ 'H^^Kioo)^ 7fl^<i}'i?g:a.i- A>-g-^H -H'^^Vdoo)^ am^l 

4 ^7fl7l^# 202). ^i^;^>^ 7))<y^ii;^i iD7\ ^5]7l^(300)^ 

•^711 ?1 ^'/Z? = A^^r/Z?; fif Wlig^l 5//? = 5- 6>/Z7 » 

<28> <0s]7l^(300)^ A^^^>(100)sf A>-g.^V(200)7> ^-R-^ <^?^, d?^, e, q. P. Pp^b, Hi. H2> 
%. Aj^Efl D|l7)l^==^^Ai ^7^%x\, ^Sl7l^(300)^ ^i^:^Kl00)^ ^7ll7l# ^7fle|-ji >H 

'^^XlOO)^ til^a^ll- oV^tt ^11^* ^i^^KlOO)ofl7ll ^i^tl:t:f(^7ll 203). 

<29> ^^cg 5i|.^joiiAi. A-lt^^Xioo)^ Z/oil ^srffe V+H^ r # ^^^1"^. U = f Qjjj%: n 

^^\c^ A\%7}c{2Q0)<^]A] U ^ ^^t!-t^(cj;^l 204). 
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<30> Al-g-;^]-(200)^ ^^ ^^S^i Zg* o\] ^s>^ a ^ ^>-§-^>(200)^ 

^^ °fl^l^l h = a-lHi(m. U') + 13% ^^^Ai'^A 205). <=^7]^^ 

U' = aU + aI3QjoO]3L m % >H^€ i^l '"-l ^1 ^1 cf . 

<3i> ^i^;<>(100)^ ^ V = (r + h)Sw^ A^^\^ ^>-§-^H^l 206). 

<32> A>-§-;^l-(200)^ >^>-§-;^>(200)7> ^d.^^ V'= aVm: y^]^^^ {m, 

U', V'}^ 208). (W, V) ^ A^]^] m a^t^ ^o]t\. 

<33> ^^Q^ 4^(^711 209)oll^i, ^>-§-^>(200)^ i^lA]^] m^, ^S] 7l^(300)ol ^7flt!: 

A]^^ ^7^^^^, ^A^A^ ^7fl7] Qio^ A^^^ e(V', P) = e(U' + HjCm, 
U')Qw. Ppub)'^^ ^^^m. ^i^^ ^^^^^ 1<^1 ^^sl-^rf. 

<34> 1] 

<35> = e(aV, P) 

<36> = error 1^ a/?;5/2?, P) 

<37> = erra/- ^ Hi(m, U') + a ^ )Qw, Ppub) 

<38> = e((ar + a )Qid + HjCm, U')Qw, Ppub) 

<39> = e(u'^ + u')Qjjj^ p^^^) 

<40> <a^^ ^ ^^^^ 7ll^<b]it^tt 7la}-o^ ^^A^i^ 7\^~§, ^^^tl 
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-§-^«^H]Ai, ^7fl7l5q- A-^x^o^ ^o]^ ^O^S. ^ .^ll- ^O] ^;^> A]>.Efl 

^^^^ ^ Siq-. ^TjjollAi S^^T^l- ^S<?I'Hl7fl y^S. 

♦ ZLS^ ^7fl7l ={(^;^> SEfe ^Tifl Al^i^Eflo^ o]^ ,1 Dflqx^ II ^;5^ || 

^;^», n} s. ^1^^ ^ ^tq-. «i^7lA-i n ^ ^a^-^^V ¥S;^>^ ^^Ic}.. 

<43> 7llcf7>. ^ ^^A^^^ A>^S^>^ ^}-%-7^^ ^^^^^ ^^1:7>^A^^ ^ 

^9^<^l^i^ 112131 Z77v« i-^^^HlAis^ M-^^, ::l^JL MuOm G2^^]'<^ ^^^]^^ 

^, ^ -^l-g-^V^V jf/fe lAd + IMu + IDiv, >H^^>7l- ^/fe, ^^^Hl^H^ ^iPa / 

i/'fl7 + lAd ^ ^>Jl Sicf. 1- ofl ^ avi^o] jL^^ole^-^ ^Tfl 

^ Sicf. ^^o] 2(batch verification)-^ <^l-§-^>o^ ^1^^><=^ 

<44> " « « 
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7}^^ €A7> §^Cf. ttfSl-^i, 7Bol^ii;^ii 7lti>o^ ^^fl^l 7la].o^ 

7}^ ^ . 



^^M, ^ "^"^^ ^ ^^^^ ^7^^ ^^i^i^iji 7)^s] ^^>i- c^.^ 

^ ^^^^ ^]^^^^ ^V-g-^V^ ^^^^ <5>q2l- ^Sl-7>^>aH n>^^l.^A^, ^]^] 

iJ sfls^^ (generic pararrel attack) tfltb ^^'^^'Hl cfl«ll>| "y:^<^li(ROS) o] 
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^^ 2003/10/27 



11 

sq- ^s^^t^^ ^^a^, 

^. 

^7] Al-g-^>7> ^7l ^7M^ ^^*]-<^ ^-l^^m n^^^ -^7] Alxg;^>7]- ^7l ^7M^ 

^i^;^V^ w]^7i» ^^*H ^-l^^V^ 

A-]t^;<>7> ^11- 7ll<J-^r>31 ^7] ^ ^ ^^-^l A>-g-;^Hl 7j) ^^^>^ 

^^7l A>-g-7^1-7> ^H*>J1 ^7] x^l^l^l* >H^^Hl7ll ^4^*>^ 

^71 ^>7> ^1-71 c1] A] ^1 d\] ^> Jl ^7] A-1 ^ nfl A] » A}^:^}d\] 7\] ^ 

^y] AV^A}7} ^o^7l A^x^^ t^ljAl^ll- 4^3r>fe ^^^4, 
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2] 

^7] 2j.5^nlE-l^ Gi, G2, ^-a^-* e, ^7] Gj ^ q, 

^o^7l ^ a5^^;^> P, ^^7\ ^^7]^2\ Ppub ^ ^^1 Hi^^A H2%: 

^oM ^ 51-^ ^^^^«r^ V ^ ^>-§-*>Jl, ^7\ 

e.- Gi >Gi ^ G2^ -^71 ^S]7l^Sl ^7lj7m ^>:iBl7l s # >^>-g-*H Ppub = 

S-P^ A"^^^, ^71 tflAl ^ Zq* ^ H2: {0.1}* ^ GiS. n^^^ 

31 

^1-71 ^i^;^]-^ ^7ll7l (?/^ ^7] ^^^A^ 7flol^it;^^ 7/?^ A>^^H ^/Z) =-%aZ?; 

^71 ^^^7\o\ til ^71 ^ SjD = s-QjD S. 
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l^^^J- 4] 

^^^^^ <=>]-%-^ 7^91^^^^ 7]^9] ^H^i^ ^^1. 

[^^^j- 5] 
^1 4 

^oM ^l^l^l^ V = (r + h)SiD S. t}^ 

71 

^1 6 *J-<^1 ^<^H. 
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^^y] ^■l'^^ ^l^l^l* =7^^^ V'= a VS. ^^^^ 



= eC aV, P) 

= e((ar + ahJSw. P) 

= e(( ar + Hi(m, U') + a ^ )Qw, Ppub) 

= e((ar + aP)Qio+ Hi(m, U')Qw, Ppub) 

= e(U', + Hi(m. U')QjD, Ppub) 

^^^^^ 7fl^^^^:e. 7i^^ ^H>H^ ^^1. 
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^ til-a^ll- ^S^^t}^ ^n^, 

^7] ><lS\7]^o] ^7] ofl7fl^^iq- ^7] ^^^y(^S^\ ^jfl^ll- i^^>^ ^7ll^^ 

^^7] A>^;^>7i- ^^7] ^7m^ ^-ti^H ^^^n^ ^^y] ^711^4- 

^^^7^s] ^-I^^V^ ^^isq-. 

^7\ A>-g-^i-7i- ojjA];^!^ ^H^l-JL ^7] t^l^l^l-i- ^i'^^HlTil "^y^]^, 

A>-§-;^>7l- ^7] A-l^g^ i^]Al^lS 4^^V^ ^n^, 
^7] A>-g-^V7> A^^o^ ^T^A^^ ^#^>fe ^^11- 5L^^V^ 

[^^^J- 10] 

^^7] Al>,tfl ^^5- 6^2. G2, ^^^^ ^1-71 Gi ^ g, 

^7] Gi ^ P, ^^7] ^S|7]^^ ^7fl7l Pp^^i, 4 SflA] Hi Hz iE^^V^l , 
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^^7] ^^^^^ # A>-§-^>jl, 

s-Z'S «flAl {0,1}* Zg* i4 {0,1}* ^ GiS. A^^^ 

^^^^ 

11] 

^1 10 ^<H^i. 
[^^^i]- 12] 

^1 11 %H1 
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131 

^1 12 9X'=>]^^, 
-g-*><^ h = a-lHi(m, U') + P, W = aU + a PQw sL A^^^ 

14] 

^1 13 *J-<^1 ^<>\^^, 

A^i^jg i^l^l^l^ K= (7- / h)SiD s. ^^i-^S 
^^^^^ o]^^ 7^9m'§.^^ 7la>o^ ^y^A^x^ 

15] 

^1 14 9X^^^. 

[^^^ 161 
15 
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eCV, P) 
= e( aV, P) 
= e((ar + ah)Sw, P) 
= e(( ar + Hi(m. U') + a p )Qid. Pp^t) 
= e((ar + a 13 )Qjd + Hi(m, U')Qw. Ppub) 
= e(U'. + H i(m, U')QiD, Ppub) 
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nil 
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[S. la] 




is. Ibl 
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